Skip to content
Snippets Groups Projects
Commit dec0e022 authored by Vladimir Davydov's avatar Vladimir Davydov Committed by Vladimir Davydov
Browse files

msgpack: fix integer overflow in mp_check

The bug was fixed in https://github.com/tarantool/msgpuck/pull/24.

This commit just bumps the submodule.

Closes https://github.com/tarantool/security/issues/18

NO_DOC=bug fix
parent 2be81637
No related branches found
No related tags found
No related merge requests found
## bugfix/core
* Fixed a bug in the MsgPack library that could lead to a failure to detect
invalid MsgPack input and, as a result, out-of-bounds read (ghs-18).
Subproject commit 0faa69988e232df03c0dd2dd04d57fdcea8e38f8 Subproject commit 61b64ff19a72e4564f0abe3b6558b33b3765767d
...@@ -2112,7 +2112,7 @@ ok 19 - subtests ...@@ -2112,7 +2112,7 @@ ok 19 - subtests
ok 5 - str is correct ok 5 - str is correct
# *** test_mp_print_ext: done *** # *** test_mp_print_ext: done ***
ok 20 - subtests ok 20 - subtests
1..69 1..71
# *** test_mp_check *** # *** test_mp_check ***
ok 1 - invalid fixmap 1 ok 1 - invalid fixmap 1
ok 2 - invalid fixmap 2 ok 2 - invalid fixmap 2
...@@ -2175,14 +2175,16 @@ ok 20 - subtests ...@@ -2175,14 +2175,16 @@ ok 20 - subtests
ok 59 - invalid array32 2 ok 59 - invalid array32 2
ok 60 - invalid map16 1 ok 60 - invalid map16 1
ok 61 - invalid map16 2 ok 61 - invalid map16 2
ok 62 - invalid map16 2 ok 62 - invalid map16 3
ok 63 - invalid map32 1 ok 63 - invalid map16 4
ok 64 - invalid map32 2 ok 64 - invalid map32 1
ok 65 - invalid map32 3 ok 65 - invalid map32 2
ok 66 - invalid header 1 ok 66 - invalid map32 3
ok 67 - invalid header 2 ok 67 - invalid map32 4
ok 68 - invalid header 3 ok 68 - invalid header 1
ok 69 - invalid header 4 ok 69 - invalid header 2
ok 70 - invalid header 3
ok 71 - invalid header 4
# *** test_mp_check: done *** # *** test_mp_check: done ***
ok 21 - subtests ok 21 - subtests
1..24 1..24
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment